{"vulnerability": "cve-2026-66794", "sightings": [{"uuid": "92b159b5-bf62-42a4-afef-d84dc6ae3605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66794", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkkwkwtqk2j", "content": "Red Hat ACM\u306b\u6700\u5927CVSS 9.9\u306e\u6df1\u523b\u306a\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\uff08CVE-2026-70496\u7b49\uff09\u304c\u767a\u899a\n\nCVE-2026-70496 & CVE-2026-66794: Privilege Escalation in Red Hat ACM Hits CVSS 9.9\u3000#DailyCyberSecurity (Aug 20)\n\nsecurityonline.info/red-hat-acm-...", "creation_timestamp": "2026-08-21T01:04:48.912731Z"}, {"uuid": "74ccb5bf-81d4-45d3-921e-8e9e388d7045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66794", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mthcpsnyvb25", "content": "Red Hat Multicluster Engine has an unpatched flaw (CVE-2026-66794, CVSS 9.3): anyone who can reach its public route can bypass login and hit internal services on any managed cluster.\n\nNo fix yet. Lock that route down now.", "creation_timestamp": "2026-08-19T17:59:53.486948Z"}, {"uuid": "4c3900f8-4e85-45cb-be2e-03205718ba52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66794", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthg536zyw22", "content": "\ud83d\udd34 CVE-2026-66794 - Critical (9.3)\n\nA flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. Th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66794/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T19:00:59.904891Z"}, {"uuid": "c4982833-a90e-49a0-abe9-29cc56ee568b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66794", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjynj6ec2u", "content": "\ud83d\udea8 CVE-2026-66794 \u2014 CVSS 9.3 CRITICAL\n\nA flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnera...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66794\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:05.493069Z"}, {"uuid": "ee10d776-cda8-43b4-9f3b-bfa8508bbf71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66794", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthwtwcljz2c", "content": "CVE-2026-66794 - multicluster engine for kubernetes\nAn attacker can access internal services without logging in. This is a security risk because it could lead to sensitive information being shared or the cluster being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-20T00:00:05.754492Z"}]}